DATA PRIVACY
We are pleased that you visit our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.
This data protection declaration applies to the Internet offer of Rabl & Hahn GmbH, which can be reached under the domain https://www.change-consulting-muenchen.de/ and the various subdomains ("our website").
WHO IS RESPONSIBLE AND HOW CAN I GET IN TOUCH?
For the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR) and a list of the supervisory authorities (for the non-public area) with addresses can be found at:
Rabl & Hahn GmbH
Lilienthalstr. 25-29
D-85399 Hallbergmoos near Munich
Phone: +49 89 90410210
E-Mail: info(at)rabl-hahn.com
QUESTIONS TO THE DATA PROTECTION OFFICER
If you have any questions about our data protection, please send us an email to info(at)rabl-hahn.com
WHAT IS IT ABOUT?
This data protection declaration fulfills the legal requirements for transparency in the processing of personal data. This is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your e-mail address, your IP address or user behavior when visiting a website. Information that we cannot (or only with disproportionate effort) relate to you personally, e.g. through anonymization, is not personal data. The processing of personal data (e.g. the collection, querying, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you about the specific storage periods and criteria for storage in the individual processing operations. Regardless of this, we save your personal data in individual cases to assert, exercise or defend legal claims and if there are statutory retention requirements.
WHO GETS MY DATA?
We only pass on your personal data, which we process on our website, to third parties if this is necessary for the fulfillment of the purposes and in individual cases is covered by the legal basis (e.g. consent or protection of legitimate interests). In addition, we pass on personal data to third parties in individual cases if this serves to assert, exercise or defend legal claims. Possible recipients can then be law enforcement authorities, lawyers, auditors, courts, etc.
If we use service providers for the operation of our website who process personal data on our behalf in the context of order processing in accordance with section 28 GDPR, these can be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations.
WHAT RIGHTS DO I HAVE?
Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), you as the person concerned have the following rights:
Information in accordance with section 15 GDPR, section 34 BDSG about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
Correction in accordance with section 16 GDPR of incorrect or incomplete data that we have stored;
Deletion in accordance with section 17 GDPR of the data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Restriction of processing in accordance with section 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it to assert, exercise or defend legal claims or you object against the processing according to section 21 GDPR.
Data portability in accordance with section 20 GDPR, insofar as you have provided us with personal data within the scope of a consent in accordance with section 6 Paragraph 1 lit. a GDPR or on the basis of a contract in accordance with section 6 Paragraph 1 lit. b GDPR and this have been processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another person responsible, as far as this is technically feasible.
Objection according to section 21 GDPR to the processing of your personal data, insofar as this is based on section 6 Paragraph 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation or the objection to direct mail directs. The right to object does not exist if overriding, compelling reasons worthy of protection are proven for the processing or the processing is carried out to assert, exercise or defend legal claims. Insofar as the right to object to individual processing operations does not exist, this is indicated there. Revocation of your consent with effect for the future in accordance with section 7 Para. 3 GDPR.
Complaint according to section 77 GDPR to a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.
HOW IS DATA PROCESSED IN DETAIL?
In the following, we will inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.
PROVISION OF THE WEBSITE
Type and scope of processing
When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
IP address of the requesting computer Date and time of access Name and URL of the file accessed Website from which the access is made (referrer URL) Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.
Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with section 28 GDPR for the purpose of providing the website.
Purpose and legal basis
The processing is carried out to safeguard our predominant legitimate interest in displaying our website and ensuring security and stability on the basis of section 6 Paragraph lit. f GDPR. The collection of data and storage in log files is essential for the operation of the website. There is no right to object to the processing due to the exception according to section 21 Paragraph 1 GDPR. Insofar as the further storage of the log files is required by law, processing takes place on the basis of section 6 Paragraph 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is technically impossible to access our website without providing the data.
STORAGE DURATION
The previously mentioned data is stored for the duration of the display of the website [and for technical reasons for a maximum of [7 days]].
CONTACT FORM
Type and scope of processing:
On our website we offer you to contact us using a form provided. The information that is collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you believe is necessary for processing the contact request.
When using the contact form, your personal data will not be passed on to third parties.
Purpose and legal basis
The processing of your data by using our contact form takes place for the purpose of communication and processing of your request on the basis of your consent in accordance with section 6 (1) (a) GDPR. Insofar as your request relates to an existing contractual relationship with us, processing for the purpose of fulfilling the contract is based on section 6 Paragraph 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not want to provide this data, please contact us by other means.
Storage period
If you use the contact form on the basis of your consent, we will store the data collected for each request for a period of three years, starting with the processing of your request or until you withdraw your consent.
If you use the contact form as part of a contractual relationship, we will save the data collected for each request for a period of [three years] from the end of the contractual relationship.
CONTACT FORM FOR APPLICANTS
Type and scope of processing:
On our website we offer you to submit an application to us using a form provided. The information that is collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you believe is necessary for processing the contact request.
We use tools from softgarden e-Recruiting GmbH to process applications. Further information on this can be found under the following link on our applicant website: https://change-consulting-muenchen.softgarden.io/de/data-security
Purpose and legal basis
The processing of your data based on the use of the application form takes place for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of section 26 BDSG. There is no legal or contractual obligation to provide your data, but it is not possible to process your application without providing the information in the mandatory fields. If you do not want to provide this data, please use other options for applying to us.
Storage period
We store the collected data for the duration of the application process [and in the case of non-employment for a period of six months from the date of rejection and in the case of employment for a period of three years after the end of employment.
REGISTRATION OF A USER ACCOUNT
Type and scope of processing
You have the option of registering a user account to use the applicant portal on our website. The information that is collected via the mandatory fields during registration is required to provide access to the user account.
For the registration of a user account, your personal data will not be passed on beyond the provision of the website (see above).
Purpose and legal basis
We process your data for the purpose of providing a user account to fulfill a contract with you in accordance with section 6 Paragraph 1 lit. b GDPR. There is a contractual obligation to provide your data, as this information is required to identify your person and to fulfill the contract on our part. There is no legal obligation to provide the data. Without providing this information, it is not possible to register a user account and thus to conclude a contract.
Storage period
We store your personal data as part of the provision of the user account for the duration of the contractual relationship. After [end of the contract / deletion of the user account], your data will only be saved if there are statutory retention requirements (e.g. tax and commercial law).
Additional information that you provide to us on the basis of your consent will only be stored until you revoke your consent by deactivating the functions / deleting the data, but at the latest until the end of the contract on which the provision of the user account is based.
USE OF THE BOOKING SYSTEM FOR ROOM BOOKING
Type and scope of processing
To use our booking system, we need your personal data in order to provide our services and to be able to bill them accordingly. The data collected here are necessary to complete the process.
Purpose and legal basis
We process your data for the purpose of providing the booking system and to fulfill a contract with you in accordance with Art. 6 Paragraph 1 lit. b GDPR. There is a contractual obligation to provide your data, as this information is required to identify your person and to fulfill the contract on our part. There is no legal obligation to provide the data. Without providing this information, the booking and thus the conclusion of a contract is not possible.
Storage period
We store your personal data as part of the booking and provision of the premises within the contractually defined period and for the duration of the contractual relationship. After the end of the contract or use of the premises, your data will only be stored further within the framework and for the duration of the statutory retention requirements (e.g. tax and commercial law). Your data will not be used for any other purpose.
GENERAL INFORMATION ON PRESENCE IN SOCUAL NETWORKS
In order to be able to present our company in the best possible way and to communicate with you as a user, customer or interested party and to inform you about the services we offer, we rely on our presence in social networks.
You can find us on the following platforms or social networks:
- Youtube
When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). A level of data protection equivalent to that available in the EU cannot be guaranteed in all countries outside the EU. In this context, it can lead to risks for you as a user if the transmitted data is processed in so-called third countries with an inadequate level of data protection.
This makes it difficult to enforce known user rights. In addition, your data may not be processed in your interest by the provider in the third country.
If providers from the USA have certified themselves under the so-called Privacy Shield Agreement - an agreement on data protection between the USA and the EU - these providers are obliged to comply with the data protection standards of the EU.
The processing purposes pursued by the social networks usually differ from ours. In most cases, the data you collect in social networks are processed for the purposes of market research, advertising and the creation of user profiles for personalized advertising (e.g. Facebook, Google, Instagram, etc.).
In order to achieve this, cookies are used, which record user behavior and enable the user to create a profile. In the case of Facebook, a user profile is also created for people who do not have a registered account on Facebook.
A specific list of the processing purposes of the user data can be found in the privacy policy of the respective provider. By making the appropriate settings in your user account, you can restrict your profile creation, at least to a limited extent. For the exact procedure, please read the corresponding data protection information of the respective provider.
FACEBOOK FANPAGE
When you visit our Facebook page, Facebook records your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more information on this under the following link: http://de-de.facebook.com/help/pages/insights.
Using the statistical information transmitted, it is not possible for us to draw conclusions about individual users. We only use them to be able to respond to the interests of our users and to continuously improve our online presence and to ensure the quality of this.
We only collect your data via our fan page in order to provide a possible means of communication and interaction with us. This survey usually includes your name, news content, comment content as well as the profile information provided by you "publicly".
The processing of your personal data for our above-mentioned purposes takes place on the basis of our legitimate business and communicative interest in the offer of an information and communication channel in accordance with Art. 6 Para. 1 lit.f GDPR. If you, as a user, have given the respective provider of the social network your consent to the data processing, the legal basis for the processing extends to Art. 6 Para. 1 lit. a, Art. 7 GDPR.
Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. Because of this, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.
If you still need help in this matter, please do not hesitate to contact us.
Affected rights
The Facebook "Page Controller Addendum" shows the rights and obligations to be observed with Facebook. You can find them under the following link: https://www.facebook.com/legal/terms/page_controller_addendum
If you request information, we will forward it to Facebook and ask you to use the corresponding contact form at
https://www.facebook.com/login.php?next=https:/2Fwww.facebook.com/help/contact/308592359910928 to be filled out.
Below you will find a detailed description of the respective data processing by the providers and their possibilities of objection (so-called opt-out) via the corresponding links to the websites of the providers: Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 , Ireland) - Privacy Policy: https://www.facebook.com/about/privacy/,
Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com,
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) -Privacy Policy: http://instagram.com/about/legal/privacy/ Opt-Out: http://www.youronlinechoices. com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Datenschutzerklärung: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Data protection declaration: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Data protection declaration: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest -controls / retargeting-opt-out? trk = microsites-frontend_legal_cookie-policy, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - data protection declaration / opt-out: https://privacy.xing.com/de/datenschutzerklaerung.
Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) Frameworks
CDNJS
Type and scope of processing
We use CDNJS to properly provide the content of our website. CDNJS is a service provided by Cloudflare, Inc., which acts as a content delivery network (CDN) on our website.
A CDN helps to provide the content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Cloudflare, Inc., whereby your IP address and possibly browser data such as your user agent are transmitted. These data are processed exclusively for the purposes mentioned above and to maintain the security and functionality of CDNJS.
Purpose and legal basis
The content delivery network is used on the basis of our legitimate interests, ie interest in a secure and efficient provision and the optimization of our online offer in accordance with Art. 6 Paragraph 1 lit.
Storage period
The specific storage duration of the processed data cannot be influenced by us, but is determined by Cloudflare, Inc. Further information can be found in the data protection declaration for CDNJS: https://www.cloudflare.com/privacypolicy/.
GOOGLE APIs
Type and scope of processing
We use Google APIs from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland to access other services and data from Google LLC. Your IP address will be transmitted to Google LLC. Please note that there is a single section in this data protection declaration for each additional service that we use from Google LLC.
Purpose and legal basis
The specific storage duration of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration for Google APIs: https://policies.google.com/privacy.
GOOGLE CDN
Type and scope of processing
We use Google CDN to properly provide the content of our website. Google CDN is a service provided by Google LLC, which acts as a content delivery network (CDN) on our website.
A CDN helps to provide the content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. These data are processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google CDN.
Purpose and legal basis
The content delivery network is used on the basis of our legitimate interests, ie interest in a secure and efficient provision and the optimization of our online offer in accordance with Art. 6 Paragraph 1 lit.
Storage period
The specific storage duration of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration for Google CDN: https://policies.google.com/privacy.
GOOGLE DOUBLE CLICK
Type and scope of processing
We have integrated components from DoubleClick by Google on our website. DoubleClick is a brand of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with every impression as well as with clicks or other activities.
Each of these data transfers triggers a cookie request to the browser of the person concerned. If the browser accepts this request, DoubleClick sets a cookie in your browser.
DoubleClick uses a cookie ID, which is necessary to carry out the technical process. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplication. The cookie ID also enables DoubleClick to record conversions. Conversions are recorded, for example, if a user has previously been shown a DoubleClick advertisement and then makes a purchase on the advertiser's website with the same internet browser.
A DoubleClick cookie does not contain any personal data, but can contain additional campaign IDs. A campaign identifier is used to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google gains knowledge of data that Google also uses to create commission statements. Among other things, Google can understand that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of Double Click, Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Further information and the applicable data protection provisions of DoubleClick by Google can be found at https://www.google.com/intl/de/policies/.
Purpose and legal basis
We process your data with the help of the double-click cookie for the purpose of optimizing and displaying advertising on the basis of your consent in accordance with Article 6 (1) (a) GDPR. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. The cookie also serves to prevent the same advertisement from being shown multiple times. Each time you visit one of the individual pages on our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and billing of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can visit our website without restriction, but not all functions may be fully available.
Storage period
The specific storage duration of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration for Google DoubleClick: https://policies.google.com/privacy.
GOOGLE FONTS
Type and scope of processing
We use Google Fonts from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offer. To obtain these fonts, connect to the servers of Google LLC, and your IP address will be transmitted.
Purpose and legal basis
The use of Google Fonts is based on our legitimate interests, ie interest in a uniform provision and the optimization of our online offer in accordance with Art. 6 Paragraph 1 lit.
Storage period
The specific storage duration of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration for Google Fonts: https://policies.google.com/privacy.
GOOGLE MAPS
Type and scope of processing
We use the Google Maps map service to create directions. Google Maps is a service provided by Google LLC, which displays a map on our website.
When you access this content on our website, you establish a connection to the servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. These data are processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google Maps.
Purpose and legal basis
Google Maps is used on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR, i.e. our interest in making it easier for you to get to the locations mentioned on the website.
Storage period
The specific storage duration of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration for Google Maps: https://policies.google.com/privacy.
NEW RELIC
Type and scope of processing
We have integrated the New Relic JS Agent on our website. New Relic JS Agent is a service provided by New Relic, Inc. that develops cloud-based software that website and application owners can use to track the performance of their services.
New Relic JS Agent gives us the opportunity to measure and improve the stability of our services by monitoring the system and code errors.
Your IP address and activities carried out on our website are collected. In this case, your data will be passed on to the operator of New Relic JS Agent, New Relic, Inc., San Francisco, California, US.
Purpose and legal basis
New Relic JS Agent is used on the basis of our legitimate interests, ie interest in optimizing our services in accordance with Art. 6 Paragraph 1 lit. f. GDPR.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by New Relic, Inc. Further information can be found in the data protection declaration for New Relic JS Agent: https://newrelic.com/termsandconditions/privacy.
NEW RELIC DATA COLLECTION SERVER
Type and scope of processing
We have integrated New Relic Data Collection Server on our website. New Relic Data Collection Server is a service provided by New Relic, Inc. that develops cloud-based software that website and application owners can use to track the performance of their services.
New Relic Data Collection Server offers the possibility to determine statistical evaluations of the technical performance of our services (e.g. the duration of a certain database query, the stability and availability of our servers, or the response time of our servers). For this purpose, application and browser data are collected and stored in the browser using cookies. In this case, your data will be passed on to the operator of New Relic Data Collection Server, New Relic, Inc., San Francisco, California, US.
Purpose and legal basis
The New Relic Data Collection Server is used on the basis of our legitimate interests, ie interest in optimizing our services in accordance with Art. 6 Paragraph 1 lit. f. GDPR.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by New Relic, Inc. Further information can be found in the data protection declaration for New Relic Data Collection Server: https://newrelic.com/termsandconditions/privacy.
DOMAIN FACTORY
Type and scope of processing
Our website was created with the Domain Factory website building block system. Domain Factory is a service provided by domainfactory GmbH and provides web development technology, web design and layout tools, domain hosting, and other marketing and workflow management applications.
Among other things, we use Domain Factory for web hosting and the presentation of our website. In addition, Domain Factory collects statistical data about visits to our website.
The following data is usually transmitted: the website accessed, the date and time of access, the amount of data transferred, the notification of whether the access was successful, the browser type and version, the user's operating system, the previously visited website (referrer) and the IP address.
These log data are processed exclusively for the purposes mentioned above, as well as to maintain the security, functionality and optimization of the Domain Factory offer.
Purpose and legal basis
The content delivery network is used on the basis of our legitimate interests, ie interest in a secure and efficient provision and the optimization of our online offer in accordance with section 6 Paragraph 1 lit.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by domainfactory GmbH. Further information can be found in the data protection declaration for Domain Factory: https://www.df.eu/int/datenschutz/.
DOMAIN FACTORY CDN
Type and scope of processing
We use Domain Factory CDN to properly deliver the content of our website. Domain Factory CDN is a service provided by domainfactory GmbH, which acts as a content delivery network (CDN) on our website.
A CDN helps to provide the content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of domainfactory GmbH, whereby your IP address and possibly browser data such as your user agent are transmitted. These data are processed exclusively for the purposes mentioned above and to maintain the security and functionality of Domain Factory CDN.
Purpose and legal basis
The service is used on the basis of our legitimate interests, ie interest in a secure and efficient provision, as well as the optimization of our online offer in accordance with section 6 Paragraph 1 lit.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by domainfactory GmbH. Further information can be found in the data protection declaration for Domain Factory CDN: https://www.df.eu/int/datenschutz/.
YouTube
Type and scope of processing
We have integrated YouTube video on our website. YouTube Video is a component of YouTube, LLC's video platform, on which users can upload content, share it over the Internet and obtain detailed statistics.
YouTube Video enables us to integrate content from the platform into our website.
YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the played videos to the profile.
When you access this content, you establish a connection to the servers of YouTube, LLC, whereby your IP address and possibly browser data such as your user agent are transmitted.
Purpose and legal basis
The service is used on the basis of our legitimate interests, ie interest in a platform-independent provision of content in accordance with Art. 6 Paragraph 1 lit. f. GDPR.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the data protection declaration for YouTube video: https://policies.google.com/privacy.
Stand: 04.02.2021